Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: LJrQ8Ya2W3fl/YksNkVlbQzk7mnenM+bj2Saixexa/8=
Subject key identifier: BD:62:30:2D:E9:CB:B5:9A:22:A8:DE:4C:3A:DB:C7:9A:2D:2B:EF:08
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019EC148A9A0D7BF29EEB4EF069F465D94CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 12B7
Signing time: Sat 13 Jun 2026 14:00:24 +0000
Manifest this update: Sat 13 Jun 2026 14:00:24 +0000
Manifest next update: Sun 14 Jun 2026 14:00:24 +0000
Files and hashes: 1: 39jtKCjlUN84oiSNf6WcfKXutcI.roa (hash: j3QkvAZ9jfUhKAEv42rUncts5G9mchS++JOlncvf+58=)
2: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 7exzLXnDyxR9mnQ6WWeFyjWDOS3hKbu/SSX7dMuSn5Y=)
3: jOTxkiOPdU5nGdnvSM-DcXfM4x0.roa (hash: DfKoS47qDsnRByR5J15LUCrTzvv6IfPekWLLNKdn6JI=)
4: kfIkh8JRl0CLg8N2X34fKzfAAIY.roa (hash: LNo3ChQs7isxQdfvX/1Vp1a9WnepBnzSUSjWncB8U/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:a9:a0:d7:bf:29:ee:b4:ef:06:9f:46:5d:94:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jun 13 14:00:24 2026 GMT
Not After : Jun 14 14:00:24 2026 GMT
Subject: CN=bd62302de9cbb59a22a8de4c3adbc79a2d2bef08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bf:58:1b:ec:98:b2:a7:d0:d8:c3:dd:08:60:
2f:af:1a:42:ae:96:3f:3e:0f:e9:19:3e:ed:99:a7:
b9:f2:c8:b5:80:ea:90:41:bd:88:2f:62:e2:41:3e:
16:fd:d4:b1:ea:7e:77:40:1f:69:e3:df:9e:86:9d:
dd:6c:e3:98:72:85:1f:85:31:12:52:8d:d2:e9:f5:
7e:fa:5d:7d:9a:ac:05:b3:c0:1d:55:2b:02:50:61:
83:40:5e:2f:9d:33:a3:6f:b8:e6:73:40:22:d0:3e:
fd:78:12:60:cb:ab:64:03:13:98:46:4d:9c:f8:a3:
09:20:f9:31:09:dc:5e:44:81:35:7e:1e:ec:5f:5e:
87:f8:a4:37:c6:23:cf:2a:d3:ad:66:f9:2b:c6:3f:
fd:87:de:88:47:fb:70:c5:72:61:44:30:53:b0:98:
89:22:dd:2c:e2:31:8a:8a:5f:77:b9:b6:95:b3:72:
80:4f:71:ae:4d:23:73:37:51:1c:8a:e7:af:e9:50:
d6:40:2e:c2:80:ec:24:52:07:10:01:ce:da:60:62:
05:74:ee:05:06:72:30:35:8c:13:28:53:13:5e:c9:
7f:31:e9:90:3b:14:61:4b:80:e4:ca:27:62:da:9c:
94:30:99:54:73:38:1d:9b:c3:1b:64:32:c0:ac:e5:
d3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:62:30:2D:E9:CB:B5:9A:22:A8:DE:4C:3A:DB:C7:9A:2D:2B:EF:08
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:d3:dc:2d:77:2d:f3:20:32:b3:ca:9b:28:67:be:c9:7e:33:
ea:09:3c:a5:f7:ce:8a:61:71:c5:3a:cd:14:60:60:21:44:09:
ea:57:4f:03:7f:13:7b:a6:70:da:b1:e4:b0:44:da:9b:8a:21:
61:1f:34:f7:39:22:fa:6b:0f:bc:39:f6:b5:0d:ae:5e:bb:75:
32:76:c0:95:4f:fa:5f:40:d7:37:87:1c:26:88:3f:6b:31:b9:
c0:e9:fc:6a:66:e2:79:06:98:db:65:04:30:05:53:b5:a5:02:
6f:5c:0b:94:21:92:e3:5d:92:fd:c3:da:45:88:7d:cf:bd:52:
8c:80:af:92:e6:3a:7c:46:5f:20:26:c9:17:c7:90:59:07:da:
68:27:15:e5:e1:a1:e8:3f:1f:bd:1c:0f:7a:b6:ab:2b:ce:e2:
3f:db:7d:ef:57:76:0c:e3:28:be:c6:4d:00:37:6f:dc:e7:86:
97:5a:ea:95:44:4d:87:a3:47:05:27:c9:18:e0:67:7f:e8:b6:
0c:1c:a8:1d:05:0c:46:ba:cb:e9:2d:bf:73:4a:b3:1d:96:65:
f9:6d:d9:9b:34:7c:fe:fd:e9:99:58:8b:ad:db:32:8c:35:6e:
ab:7d:6d:b8:a5:77:78:56:eb:6d:2e:ab:63:fd:a7:19:e0:5c:
21:6b:e7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:01:48 2026 by rpki-client